扫了次全盘，找出几个东东。

显示全部楼层 · 发表于 2008-6-12 19:20:13

有几个看上去不怎么像毒。

显示全部楼层 · 发表于 2008-6-12 19:39:37

看看

显示全部楼层 · 发表于 2008-6-12 19:40:43

MayaBaby.Dll\[UPX] Win32:OnLineGames-DYM [Trj]
SysInfo1.dll Win32:OnLineGames-CEP [Trj]
vps : 080606-0, 2008-06-06

显示全部楼层 · 发表于 2008-6-12 19:42:50

Begin scan in 'C:\Documents and Settings\Administrator\桌面\scanres.rar'
C:\Documents and Settings\Administrator\桌面\scanres.rar
  [0] Archive type: RAR
  --> cmdow.exe
   [DETECTION] Contains detection pattern of the SPR/HideWindows.I program
  --> un03[1].jpg
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
--> MayaBaby.Dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> SysInfo1.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iea
   [NOTE]    A backup was created as '48b20c19.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-12 19:50:24

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://bbs.kafan.cn/attachment.p ... fb&t=1213271401
Information: Contains detection pattern of the SPR/HideWindows.I program

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.55, VDF 7.0.4.185

显示全部楼层 · 发表于 2008-6-12 20:06:03

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.AvKiller.cc
病毒： Trojan.PSW.Win32.QQPass.GEN

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.48.32

显示全部楼层 · 发表于 2008-6-12 20:09:23

当正在打开文件 "C:\Documents and Settings\祝俊杰\Local Settings\Temporary Internet Files\Content.IE5\4TE7G5QJ\scanres[1].rar" 病毒 "not-a-virus:RiskTool.Win32.HideWindows, Trojan-Downloader.Win32.Agent.sxl, Trojan-PSW.Win32.OnLineGames.iea" 从引擎 "引擎 A" 被删除. 文件更改: 否. 文件删除: 否. 隔离区: 否

显示全部楼层 · 发表于 2008-6-12 20:19:19

===================================================================================================
手动扫描器 7.0.0.0

NSE revision 5.92.08
nvcbin.def revision 5.92.00 of 2008/06/12 08:17:37 (1747404 variants)
nvcmacro.def revision 5.92.00 of 2008/06/09 16:19:26 (20430 variants)
Total number of variants: 1767834
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------

- Scanning drive: G:\
- Scanning system areas of drive: G:\
- Scanning files in the directory: G:\v\c\
   156 ms G:\v\c\cmdow.exe
      0 ms G:\v\c\MayaBaby.Dll
      0 ms G:\v\c\SysInfo1.dll                                        Trojan W32/OnLineGames.WHZ ()
- File G:\v\c\SysInfo1.dll quarantined.
- File G:\v\c\SysInfo1.dll deleted.
   15 ms G:\v\c\un03[1].jpg                                        Trojan Hupigon.gen131 ()
- File G:\v\c\un03[1].jpg quarantined.
- File G:\v\c\un03[1].jpg deleted.

===================================================================================================

The scanning started: 2008/06/12 20:20:10
            ended: 2008/06/12 20:20:11
Logged on as       : Administrator
on hostname       : 10C3F72C72244B2

Scanning results:
Total number of files found..............................:    4
Number of files scanned..................................:    4
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    2

Copyright (c) 1993-2007 Norman ASA.

显示全部楼层 · 发表于 2008-6-12 20:34:23

[Found possible security risk] <W32/Heuristic-MU3!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\scanres.rar->un03[1].jpg
[Found possible security risk] <W32/Heuristic-KPP!Eldorado (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\scanres.rar->MayaBaby.Dll->(UPX)
[Found virus] <W32/InfoStealer!Generic (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\scanres.rar->SysInfo1.dll

---------------------------------------------------------------------
Scan ended: 2008-6-12, 20:34:03
Duration: 0:00:02

显示全部楼层 · 发表于 2008-6-12 20:38:39

卡巴报的那个名是什么意思？

[病毒样本] 扫了次全盘，找出几个东东。

本帖子中包含更多资源

评分

本帖子中包含更多资源

6/2

F-Prot 4.4.4